./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3296811142
<...>
DUID 00:04:11:31:ea:d8:bb:db:47:a8:80:cb:7d:0b:3c:d8:ea:74
forked to background, child pid 3183
[ 26.790309][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.798974][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.252' (ECDSA) to the list of known hosts.
execve("./syz-executor3296811142", ["./syz-executor3296811142"], 0x7ffe59f555d0 /* 10 vars */) = 0
brk(NULL) = 0x555556434000
brk(0x555556434c40) = 0x555556434c40
arch_prctl(ARCH_SET_FS, 0x555556434300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3296811142", 4096) = 28
brk(0x555556455c40) = 0x555556455c40
brk(0x555556456000) = 0x555556456000
mprotect(0x7fe3ed57e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3
memfd_create("\x79\x10\x35\x25\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd", MFD_ALLOW_SEALING) = 4
pwrite64(4, "\xa0", 1, 23395) = 1
fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0
dup(3) = 5
ioctl(5, UDMABUF_CREATE, 0x20000080) = 6
syzkaller login: [ 49.494773][ T3604] ------------[ cut here ]------------
[ 49.494784][ T3604] WARNING: CPU: 1 PID: 3604 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0
[ 49.510396][ T3604] Modules linked in:
[ 49.514316][ T3604] CPU: 0 PID: 3604 Comm: syz-executor329 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 49.524784][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.534971][ T3604] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 49.540931][ T3604] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 49.560654][ T3604] RSP: 0018:ffffc9000314fd68 EFLAGS: 00010293
[ 49.566735][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 49.574775][ T3604] RDX: ffff888022843b00 RSI: ffffffff81665c81 RDI: ffff88814942d408
[ 49.582855][ T3604] RBP: ffff88814942d000 R08: 0000000000000002 R09: ffff888011bfdfef
[ 49.591006][ T3604] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 49.598994][ T3604] R13: ffff88801f27be80 R14: 0000000000000002 R15: 0000000000000000
[ 49.607083][ T3604] FS: 0000555556434300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 49.616192][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.622859][ T3604] CR2: 00007fe3ed522fc0 CR3: 000000006f122000 CR4: 00000000003506f0
[ 49.630995][ T3604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.638976][ T3604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.647064][ T3604] Call Trace:
[ 49.650394][ T3604]
[ 49.653344][ T3604] dma_map_sgtable+0x70/0xf0
[ 49.657969][ T3604] get_sg_table.isra.0+0xe0/0x160
[ 49.664657][ T3604] begin_cpu_udmabuf+0x130/0x1d0
[ 49.669629][ T3604] ? map_udmabuf+0xa0/0xa0
[ 49.674138][ T3604] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 49.679617][ T3604] dma_buf_ioctl+0x259/0x2b0
[ 49.684302][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 49.690180][ T3604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 49.696438][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 49.702339][ T3604] __x64_sys_ioctl+0x193/0x200
[ 49.707123][ T3604] do_syscall_64+0x35/0xb0
[ 49.711842][ T3604] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 49.717760][ T3604] RIP: 0033:0x7fe3ed511c19
[ 49.722280][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.742116][ T3604] RSP: 002b:00007fff96956888 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.750594][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe3ed511c19
[ 49.758586][ T3604] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 49.768048][ T3604] RBP: 00007fe3ed4d5dc0 R08: 0000000000000000 R09: 0000000000000000
[ 49.776120][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3ed4d5e50
[ 49.784207][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.792282][ T3604]
[ 49.796157][ T3604] Kernel panic - not syncing: panic_on_warn set ...
[ 49.802760][ T3604] CPU: 0 PID: 3604 Comm: syz-executor329 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0
[ 49.812938][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.823040][ T3604] Call Trace:
[ 49.826327][ T3604]
[ 49.829273][ T3604] dump_stack_lvl+0xcd/0x134
[ 49.833984][ T3604] panic+0x2d7/0x636
[ 49.837895][ T3604] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 49.843904][ T3604] ? __warn.cold+0x1d9/0x2cd
[ 49.848509][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.853723][ T3604] __warn.cold+0x1ea/0x2cd
[ 49.858150][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.863365][ T3604] report_bug+0x1bc/0x210
[ 49.867717][ T3604] handle_bug+0x3c/0x60
[ 49.871886][ T3604] exc_invalid_op+0x14/0x40
[ 49.876401][ T3604] asm_exc_invalid_op+0x1b/0x20
[ 49.881270][ T3604] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0
[ 49.887089][ T3604] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 50 66 c1 0d e9 db fe ff ff e8 e6 57 13 00 0f 0b e8 df 57 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 d0 57 13 00 49 8d 7f 50 48 b8 00
[ 49.906791][ T3604] RSP: 0018:ffffc9000314fd68 EFLAGS: 00010293
[ 49.912867][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 49.920843][ T3604] RDX: ffff888022843b00 RSI: ffffffff81665c81 RDI: ffff88814942d408
[ 49.928820][ T3604] RBP: ffff88814942d000 R08: 0000000000000002 R09: ffff888011bfdfef
[ 49.936797][ T3604] R10: ffffffff81665b62 R11: 0000000000000001 R12: 0000000000000001
[ 49.944774][ T3604] R13: ffff88801f27be80 R14: 0000000000000002 R15: 0000000000000000
[ 49.952757][ T3604] ? __dma_map_sg_attrs+0x62/0x1f0
[ 49.957903][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.963123][ T3604] ? __dma_map_sg_attrs+0x181/0x1f0
[ 49.968336][ T3604] dma_map_sgtable+0x70/0xf0
[ 49.972938][ T3604] get_sg_table.isra.0+0xe0/0x160
[ 49.977983][ T3604] begin_cpu_udmabuf+0x130/0x1d0
[ 49.982936][ T3604] ? map_udmabuf+0xa0/0xa0
[ 49.987364][ T3604] dma_buf_begin_cpu_access+0xfd/0x1d0
[ 49.992835][ T3604] dma_buf_ioctl+0x259/0x2b0
[ 49.997442][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.003175][ T3604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 50.009430][ T3604] ? dma_buf_begin_cpu_access+0x1d0/0x1d0
[ 50.015171][ T3604] __x64_sys_ioctl+0x193/0x200
[ 50.019955][ T3604] do_syscall_64+0x35/0xb0
[ 50.024383][ T3604] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.030294][ T3604] RIP: 0033:0x7fe3ed511c19
[ 50.034718][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.054340][ T3604] RSP: 002b:00007fff96956888 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.062762][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe3ed511c19
[ 50.070737][ T3604] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006
[ 50.078714][ T3604] RBP: 00007fe3ed4d5dc0 R08: 0000000000000000 R09: 0000000000000000
[ 50.086690][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3ed4d5e50
[ 50.094667][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.102658][ T3604]
[ 50.105947][ T3604] Kernel Offset: disabled
[ 50.110394][ T3604] Rebooting in 86400 seconds..